OS Command Injection Week: From a Quoted Shell String to a One-Line Webshell
Four KEV adds, one root cause. Lab reproduction of CWE-78 to an shx webshell with IFS and base64, plus the log, file, and process detections that catch it.
Collabora
Read Full News
Your Nextcloud Grew a Webshell Because the Office Button Took the Weekend Off
Collabora Built-in CODE Server shelled out through a bad quote. KEV Oct 23 with a 3-day fuse, shx*.php webshells, fixed in 26.4.303. Patch and hunt.